“Failed to scrape node“ err=“Get \“https://:10250/metrics/resource\“: x509: cannot validate故障排除

metrics-server在运行中遇到问题,其状态保持在0/1Running。错误日志显示,metrics-server在尝试访问节点的10250端口时,由于证书缺少IPSANs导致验证失败。这个问题影响了metrics-server收集和提供资源指标的能力。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

起因实验环境的metrics-server状态一直是0/1 Running

1. 报错信息

用kubectl logs -n kube-system metrics-server-67db5c9b4f-kmflf查看容器时,出现以下报错.

I0403 00:53:12.159359       1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
I0403 00:53:22.159679       1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:26.965752       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
E0403 00:53:26.983120       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:26.983215       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"
I0403 00:53:32.159983       1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:41.967697       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"
E0403 00:53:41.980183       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:41.982200       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
I0403 00:53:42.159965       1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
I0403 00:53:52.159198       1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:56.959022       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
E0403 00:53:56.973551       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:56.983067       1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"

2. 报错原因

kubelet 的10250端口使用的是https协议,连接需要验证tls证书.

3. 解决方法

Deployment的spec.template.spec.containers.args
大概140行左右,加上以下配置.保证在args中就可以,上下位置无所谓

- --kubelet-insecure-tls

在这里插入图片描述

评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值